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REMARKS 

The Office Action dated October 5, 2006, has been 
received and its contents carefully noted. In order to 
advance prosecution, the independent claims have been amended 
to more clearly define the contribution of the invention over 
the prior art . 

The rejection of claims 1-20 as unpatentable under 35 
USC103(a) over Nolting et al (US 6,298,123) in view of Johnson 
et al (US5, 345, 595) is respectfully traversed on the grounds 
that the claims, as now amended, clearly define patentable 
over any reasonable combination of the teachings of those 
references. 

The present invention provides a solution to the problem 
of detecting a fraud event in a distributed telecommunications 
network, based primarily on analyzing records data obtained 
from different elements in the network, where at least some of 
these elements are associated each with an entity having a 
different functionality in the network, and checking the 
consistency between the data received from these different 
elements. Whenever it is found' that there is an inconsistency 
between data which applies to the same event but is retrieved 
from two or more elements, that event will be recognized as a 
fraud event. 

Neither of the applied references refers to such a 
solution . 

Nolting et al discloses collecting call data 
records (CDRs ) and analyzing them but does not teach in any way 
the basic features of the present invention, namely the 
collection of data from different elements in the network, 
belonging to two functional groups, nor does it even suggest 
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that a decision relating to a certain event (e.g. whether the 
event is a fraud event) can be taken based on the consistency 
between the data retrieved from different functional groups. 

In a similar way, Johnson, which relates to the detection 
of fraud events, does not suggest any solution similar to that 
of the present invention. The solution provided by Johnson is 
based on a comparison of the present behavior of a subscriber 
with the behavior of that subscriber in the past, and if there 
is no match, than the present event can be considered as a 
fraud event. However, Johnson, like Nolting, does not suggest 
one of the main features of the present invention, namely 
taking the decision whether a current event is fraudulent, 
based on different information gathered from different 
sources . 

In particular, the CDRs collected according to Nolting 
are used as follows: "Analysis of usage and traffic patterns 
for the current period utilizes the newly collected CDRs (Dl). 
The analysis may compare results from those CDRs and/or the 
current lists to archived information (D2) (emphasis added), to 
show incremental changes and long term trends apparent from 
the interconnect traffic. ...The analytical processing of such 
CDRs enable the LEC ... to identify traffic patterns, and in 
some cases at least, to distinguish different types and levels 
of service" (col. 10 lines 11 -26). Furthermore, Nolting does 
not teach the retrieval of information from different elements 
that belong to at least two functional groups, as the 
different sources to which the Examiner has referred in the 
Office Action (col 20. lines 41-60) are protocols associated 
with the application layer such as TCAP, OMAP, and ISUP. 

The method taught by Johnson is described as follows: 
"The function of the event manager 113 is to perform a number 
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of checks to compare the present CCF record both with past 
subscriber specific usage information (emphasis added) and 
with certain predetermined conditions to determine whether 
this particular CCF record should trigger the even manager 113 
to generate an "event", (col. 6 lines 55 - 61). 

Thus, each of the independent claims now pending 
distinguishes over the applied references by their recitations 
relating to obtaining or analyzing data relating to at least 
two elements and relating to the same telecommunications 
session. In addition, at least claims 3 and 14 further 
distinguish by specifying that the data originate in elements 
belonging to different functional groups. 

In view of the above, it is respectfully submitted that 
since each of the two references cited by the examiner, as 
well as their combination, rely on comparing information 
currently retrieved with past information, they could be 
considered at best as teaching away from the present 
invention, and should not be considered to render the present 
invention obvious. 

In view of the foregoing, it is requested that the prior 
art rejection be reconsidered and withdrawn, that claims 1-20 
be allowed and that the application be found in allowable 
condition. 



14 



Appln. No. 09/995,792 

Amd. dated February 6, 2 00 6 

Reply to Office Action of October 5, 2005 

If the above amendment should not now place the 
application in condition for allowance, the Examiner is 
invited to call undersigned counsel to resolve any remaining 



issues . 



Respectfully submitted, 



B ROWDY AND NEIMARK, P.L.L.C. 
Attorneys for Applicant 




JMF:dtb 

Telephone No. : (202) 628-5197 
Facsimile No. : (202) 737-3528 
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